Security Model

Security Model

ABG is designed around local execution and explicit browser-tab authorization.

Core Rules

• The gateway runs locally.
• Browser access is mediated by the extension.
• Normal browsing uses per-tab sharing.
• Write operations require approval.
• Audit logs record operation metadata, not downloaded file contents.
• Plugins run as local code and should only be installed from trusted sources.

What ABG Does Not Do

• ABG does not grant blanket access to every browser tab by default.
• ABG does not read downloaded file contents for download metadata commands.
• ABG does not make untrusted plugins safe.

Reporting

Use the repository security policy for vulnerability reports:

https://github.com/arcmanagement/agent-browser-gateway/security/policy